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Get a jump start on your LDAP project with t 
Client. 
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Your LDAP Connectivity Solution for .Net new! and ActiveX 

The LDAP Client product family is your complete solution for building LDAP applications on the Microsoft platf< 
and ActiveX components are designed for accessing Lightweight Directory Access Protocol (LDAP) servers froi 
Basic. Net, ASP. Net, Visual Basic, Active Server Pages, or any other .Net, ActiveX or C++ application on the V\ 
platform. 

The LDAP Client is designed for ease of use for the client programmer and allows for easy searching, browsim 
updating of LDAP servers. By using the LDAP Client in your application you will be able to add powerful featur 
sacrificing speed or size of your application. 

The LDAP Client supports access to X.500, LDAP v2 and v3 servers. The .Net LDAP Client supports any .Net a 
targetting versions 1.1 and 2.0 of the .Net Framework. The ActiveX LDAP Client has been tested from the mo 
ActiveX containers, including Microsoft Visual Basic, Active Server Pages and C++ applications. 
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Understanding LDAP 

WHiTE PAPER Posted: September 20, 2000 §*i Web-friendlv version 

Summary 

This paper provides detailed information about LDAP, the directory service protocol used by the 
Active Directory® service. The download available from this page also includes a Powerpoint® 
presentation and other files to assist you in understanding and using LDAP. 

Light Weight Directory Access Protocol (LDAP) is an open network protocol standard designed to 
provide access to distributed directories. LDAP provides a mechanism for querying and modifying 
information that resides in a directory information tree (DIT). A directory information tree 
typically contains a broad range of information about different types of network objects including 
users, printers, applications, and other network resources. LDAP is described through four basic 
models: Information, Naming, Functional, and. Security. The combination of these models 
introduces a nomenclature that describes entries and their attributes, and provides methods to 
query and manipulate their values. 

This paper provides the following information: 

■ LDAP Fundamentals introduces the four models that describe LDAP and presents additional • 
concepts that are relevant to the understanding of LDAP. 

■ Core LDAP APIs describes the fundamental APIs that are used to expose the LDAP protocol. 
Each API is reviewed from a programmatic point of view with respect to what is actually 
placed on the network wire. It is important to remember that LDAP is a network protocol 
standard, not a defined API standard. While there exist well-known APIs to access the LDAP 
protocol, each API is vendor-specific. The goal of this paper is not to analyze the different 
vendor implementations of LDAP APIs, but rather to study LDAP from a network protocol point 
of view. 

■ Interpreting LDAP errors. In addition to the RFC-defined errors that are returned by a 
Directory Sever Agent (DSA) to a client, additional error information may be obtained from a 
network trace. How to interpret that error information is the focus of the final section. 
Included with this document download is a file called Demo.vbs, a sample Visual Basic 
Scripting (.vbs) script that illustrates use of LDAP. 

Also included are the following Network Monitor trace files associated with running the Demo.vbs 
sample: 

■ Authentication. cap: a network trace associated with establishing a connection using the 
Authentication APIs. 

■ Interrogation. cap: a network trace associated with directory search requests and responses 
using the Interrogation APIs. 

■ Update. cap: a network trace associated with updating the directory information tree using the 
Update APIs. 
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